Celesse Privacy Policy

Effective date and last updated: September 23, 2026

This Privacy Policy explains what personal data Celesse collects, why, who we share it with, how long we keep it, and the rights you have. We have tried to write it plainly. If anything is unclear, write to support@celesse.co.

1. Who Is Responsible for Your Data #

a) The Company (data controller). Alvin AI Studio LLC, 447 Broadway, 2nd Floor Suite 3007, New York, NY 10013, USA (the "Company", "we", "us"), is the controller of the personal data described in this Policy and is the Seller and Merchant of Record for the Service. All privacy requests go to the Company at support@celesse.co (Section 19).

b) Otto Apps (Technical Provider / Content Licensor; processor). Otto Apps Yazılım Uygulama Bilgi Teknoloji Reklamcılık Danışmanlık Sanayi ve Ticaret A.Ş. ("Otto Apps"), İçerenköy Mah. Topçu İbrahim Sk. Quick Tower No:8-10D, Ataşehir / İstanbul, Turkey, is an independent technical service provider and content licensor that develops the software infrastructure of the Service, ensures its technical operation, and produces in-app content. For privacy purposes Otto Apps acts as a processor: it processes personal data only on the Company's behalf, on the Company's instructions, and under a written data processing agreement. Otto Apps is not the controller of your data, is not the Merchant of Record, does not sell subscriptions to you, does not receive or store your payment card details, and does not use your personal data for its own purposes.

c) Privacy contact for all regions. Privacy requests and questions from every country, including the European Economic Area, the United Kingdom and Switzerland, are handled by the Company. Please send them to support@celesse.co.

2. What This Policy Covers #

This Policy covers the Celesse website (celesse.co), the quiz and checkout funnel, the Celesse web application, and emails we send you. It does not cover third-party websites we link to.

3. The Data We Collect #

We collect only what is needed to produce your readings, run your account and improve the Service.

We do not collect precise geolocation, contacts, or data from your social-media accounts.

4. Why We Use Your Data and Our Legal Bases #

Where the GDPR or UK GDPR applies, we rely on the following legal bases.

Where we rely on legitimate interest, we have balanced that interest against your rights. You can object at any time (Section 10).

5. Sensitive Information: How We Treat Birth Data, Palm Photographs and Anything Health-Related #

• Birth data. Your date, time and place of birth are not "special category" data under Article 9 GDPR in themselves. But together they are close to unique to you and cannot be changed, so we treat them as sensitive: they are stored with access restrictions and encrypted at rest by our database provider, used only to produce your readings, and never shared with advertising platforms.
• Palm photographs are used solely to create your palm reading. We do not use them to identify you, and we do not process them as biometric identifiers. See Section 9 for how long we keep them.
• Partner and relationship inputs. Information about the gender of a partner or your relationship goals may reveal your sexual orientation. We use it only to produce your readings, never share it with advertising platforms, and, where the law requires your explicit consent, process it only on that basis.
• Health and well-being. If you choose to share information about your health or well-being with us, we use it only to personalise your readings, process it only with your explicit consent where the law requires, delete it on request, and never share it with advertising or analytics partners.
• What advertising platforms receive. At most, the fact that a purchase or a funnel step occurred, its value and currency, and a hashed identifier. Never your birth data, chart, sign, readings, sketch preferences or photographs.

6. Automated Processing and Artificial Intelligence #

• Charts are calculated from your birth data using astronomical ephemeris calculations, performed by our software and by third-party astrology calculation providers (Section 7).
• Readings. Astrological interpretation content is selected on the basis of your chart placements and assembled into a continuous reading by a large language model accessed through OpenRouter. We send these providers the information needed to produce the reading, such as chart placements and quiz context. Your quiz and funnel answers are sent to these AI providers only to write your readings, without your name or email address. The providers process this data to return a result to us, under their own terms and data-protection commitments.
• Soulmate Sketch. We build a text description from the preferences you selected and send it to fal.ai to generate the image. Every image passes an automated safety check before it is delivered to you.
• Palm reading. Your photograph is sent through OpenRouter to an AI vision model to identify the lines of the hand, and the interpretation is produced from that output.
• No decisions with legal effect. We do not use automated decision-making that produces legal or similarly significant effects on you.

7. Who We Share Your Data With #

We do not sell your personal data for money. We share it with service providers who process it on our behalf under contracts or terms that restrict their use of it, and in the other situations listed below. Otto Apps is our main processor; the other providers act as processors or sub-processors.

We may also share personal data:

• with professional advisers (lawyers, accountants, auditors) under confidentiality;
• with authorities, courts or regulators where required by law or to protect rights, safety or property;
• with a buyer or successor in the event of a merger, acquisition or sale of assets, subject to this Policy;
• with your consent or at your direction.

Advertising cookies and pixels may count as "selling" or "sharing" under some US state laws. Section 15 explains how to opt out.

8. International Data Transfers #

The Service is operated by the Company from the United States, and its technical infrastructure is operated by Otto Apps from Türkiye. Depending on where you live, your personal data may therefore be transferred to, stored in and processed in the United States, Türkiye and the other countries where our service providers operate (Section 7). These countries may have data-protection laws that differ from those in your country.

Where a transfer is subject to the GDPR, the UK GDPR, the Swiss FADP or comparable law, we rely on appropriate safeguards: the European Commission's Standard Contractual Clauses (with the UK International Data Transfer Addendum and the Swiss amendments where applicable), or a provider's certification under the EU-U.S. Data Privacy Framework, together with supplementary technical and organisational measures. You can request information about the relevant safeguards at support@celesse.co.

9. How Long We Keep Your Data #

Otto Apps and our other processors keep personal data only for as long as the Company instructs, and delete or return it when their agreement with the Company ends.

10. Your Rights #

Depending on where you live, you have the right to:

• access the personal data we hold about you and receive a copy;
• correct inaccurate or incomplete data;
• delete your data ("right to be forgotten");
• restrict or object to certain processing, including processing based on legitimate interest;
• port your data to another service in a machine-readable format;
• withdraw consent at any time, without affecting processing that took place before withdrawal;
• complain to a data-protection authority (Section 17).

To exercise a right, use the controls in your account settings or email support@celesse.co. Requests should be addressed to the Company as controller, not to Otto Apps; the Company will instruct Otto Apps and any other processor to give effect to your request. We may need to verify your identity, usually by asking you to confirm from the email address on your account. We respond within one month, extendable by two further months for complex requests, and we will tell you if we need more time. Exercising your rights is free unless a request is manifestly unfounded or excessive.

11. Closing Your Account and Deleting Your Data #

You can close your account at any time from your account settings or by emailing support@celesse.co. On closure we sign you out on every device, cancel any active subscription, and cancel any Soulmate Sketch or palm reading not yet generated. A closed account cannot be signed in to.

For 90 days after closure you can ask us to restore your account by emailing support@celesse.co from the address on your account; a cancelled subscription is not restored. After that window we permanently delete your personal data from our database, image storage, sign-in records and analytics, and ask our payment processor to delete your customer record (it keeps its own records as required by financial law). Our email provider keeps delivery logs of the messages we sent you for a limited period under its own retention. We keep only:

• payment and transaction records, for as long as tax and accounting law requires;
• anonymised activity records, with all identifiers removed;
• a record that a deletion request was made and completed, as proof of compliance.

Deleted data may remain in our providers' encrypted backups for a limited period until those backups are overwritten in the normal course.

If someone has added your birth data to their account for a compatibility reading, you can ask us to delete it by writing to support@celesse.co.

Remove my data. You do not need an account to ask us to remove the quiz answers and birth details linked to your email address. Submit the address at celesse.co/remove-my-data and confirm through the link we email to it; nothing is removed without that confirmation. If you are signed in, you can make the request from your account without the email step. Once the request is confirmed, we stop sending marketing emails to that address, including from any future visit, and delete that data automatically. If we hold no data for the address, nothing is sent and nothing changes. We store the request only as a one-way hash of the address. If the address belongs to an account, the account is closed only if you ask for that (see above).

12. Marketing and Other Communications #

• Service emails are part of the Service and cannot be switched off while your account is open: sign-in and account-access links, price-change notices, account notices and replies to your requests. We do not send renewal-reminder emails. Payment receipts, where enabled, are sent by our payment processor Stripe.
• Marketing emails are sent only if you ticked the separate marketing box. Every marketing email includes our postal address and an unsubscribe link, and you can withdraw your consent at any time by using that link or by writing to support@celesse.co.

13. Security #

We and Otto Apps protect your data with encryption in transit (TLS) and at rest, access controls and least-privilege practices, and review of our providers. No system is perfectly secure. If a breach affects your data, we will notify you and the relevant authority as required by law.

14. Children #

The Service is not directed to anyone under 18, and we do not knowingly collect personal data from anyone under that age. When you enter your email address you confirm that you are 18 or older. If we learn that we have collected data from someone under 18, we delete it. If you believe a child has provided us with data, contact support@celesse.co.

15. Additional Information for Residents of the United States #

This Section applies to residents of California and of other US states with comprehensive privacy laws (including Colorado, Connecticut, Delaware, Iowa, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia).

Categories of personal information we collect (with reference to the California Consumer Privacy Act): identifiers (email, name, IP address, device identifiers); customer-records information (billing data via Stripe); characteristics of protected classifications (date of birth, gender); commercial information (purchases, subscription status); internet or network activity (usage data, cookies); approximate geolocation (country or region derived from IP); inferences (your chart and readings); and sensitive personal information: account log-in credentials, and information that may reveal sexual orientation where you provide partner-gender inputs. We use sensitive personal information only to provide the Service you requested and do not use it to infer characteristics about you for other purposes.

Sources and purposes are described in Sections 3 and 4. Categories of recipients are described in Section 7.

Sale and sharing. We do not sell personal information for money. Our use of advertising cookies and pixels may be considered "selling" or "sharing" for cross-context behavioural advertising. You can opt out at any time by emailing support@celesse.co with the subject "Do Not Sell or Share", by using the browser settings and provider opt-outs described in our Cookie Policy, or by enabling the Global Privacy Control signal in your browser, which we treat as a valid opt-out request where the law requires. We do not knowingly sell or share the personal information of anyone under 16.

Your rights include the right to know what personal information we collect, use and disclose; to delete it; to correct it; to opt out of sale or sharing; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights. Some states also grant a right to appeal a decision we make about your request. Submit requests at support@celesse.co or through your account settings. We verify requests by confirming control of the email address on the account. We respond within 45 days (extendable once by 45 days where permitted). You may use an authorised agent; we will ask for proof of authorisation.

Retention is described in Section 9. California "Shine the Light": we do not disclose personal information to third parties for their own direct-marketing purposes.

16. Additional Information for Residents of Canada #

We process personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws, including Quebec's Law 25. Your data is transferred to and processed in the United States and other countries by the providers listed in Section 7. You may access, correct and withdraw consent to the use of your personal information, and may complain to the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information du Québec. The person responsible for the protection of personal information is reachable at support@celesse.co.

17. Additional Information for the EEA, the UK and Switzerland #

Our legal bases are set out in Section 4, and international transfers in Section 8. You have the right to lodge a complaint with the data-protection authority of the country where you live or work, or where an alleged infringement took place. The Company is not established in the EU or the UK. Requests from the EEA, the UK and Switzerland are handled by the Company at support@celesse.co.

18. Changes to This Policy #

We may update this Policy. If we make a material change, we will notify you by email or by a prominent notice in the Service before it takes effect. The date at the top shows when this Policy was last revised.

19. Contact #

• Privacy requests and questions: support@celesse.co
• Controller: Alvin AI Studio LLC, 447 Broadway, 2nd Floor Suite 3007, New York, NY 10013, USA
• Technical Provider / Content Licensor, acting as processor (not the addressee of privacy requests): Otto Apps Yazılım Uygulama Bilgi Teknoloji Reklamcılık Danışmanlık Sanayi ve Ticaret A.Ş., İçerenköy Mah. Topçu İbrahim Sk. Quick Tower No:8-10D, Ataşehir / İstanbul, Turkey